adjust dependency check plugin

cryptomator · Dec 13, 2023 · 6702982 · 6702982
1 parent daade88
commit 6702982
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/.github/workflows/dependency-check.yml b/.github/workflows/dependency-check.yml
@@ -34,7 +34,7 @@ jobs:
  - name: Run org.owasp:dependency-check plugin
  id: dependency-check
  continue-on-error: true
- run: mvn -B verify -Pdependency-check -DskipTests
+ run: mvn -B validate -Pdependency-check
  env:
  NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
  - name: Upload report on failure

diff --git a/pom.xml b/pom.xml
@@ -182,14 +182,18 @@
  <artifactId>dependency-check-maven</artifactId>
  <version>${dependency-check.version}</version>
  <configuration>
+ <nvdValidForHours>24</nvdValidForHours>
  <failBuildOnCVSS>6</failBuildOnCVSS>
+ <skipTestScope>true</skipTestScope>
+ <detail>true</detail>
  <nvdApiKey>${env.NVD_API_KEY}</nvdApiKey>
  </configuration>
  <executions>
  <execution>
  <goals>
  <goal>check</goal>
  </goals>
+ <phase>validate</phase>
  </execution>
  </executions>
  </plugin>